An email scam cautionary tale
By Nancy Rubin, K.C. and Levi Parsche
What happens if a person accidentally makes payment to a hacker, instead of to the person they actually owe money? Should they have to pay again? In the recent decision, Jane Group Limited v. Heritage Gas Limited, 2022 NSSM 36, a small claims court adjudicator said yes.
EFT Payment Scam
In the case, two companies had agreed to split the costs to repair a sidewalk after a natural gas line was installed. Shortly after the repairs were completed, Jane Group emailed Heritage Gas seeking payment of its share. Heritage Gas responded, requesting an invoice for the repairs, and indicated it could pay by electronic funds transfer (“EFT”) or via cheque. So far, so good.
Then, Heritage Gas received what it assumed was a response from Jane Group, providing banking information and instructions to send payment via EFT. Unfortunately, this email was actually from an online hacker who had intercepted previous communications. The hacker, representing themselves as the Jane Group president, provided information for a fraudulent bank account, and asked for the money to be deposited that same day.
Heritage Gas emailed Jane Group again indicating it needed an invoice before it could make a payment. In response, (and from a different email address) Jane Group provided an invoice, which indicated payment should be made by cheque to a mailing address.
Unfortunately, upon receipt of the invoice, Heritage Gas followed the earlier EFT instructions that had been sent, depositing the payment into the fraudulent bank account provided by the hacker.
Decision
Having not received payment, Jane Group sued for recovery from Heritage Gas. Counsel for Jane Group argued that there were several “red flags” in the email from the hacker (spacing and typographical errors) which should have triggered a follow-up by Heritage Gas, not to mention the discrepancy in the direction to pay via EFT or cheque.
On the other hand, counsel for Heritage Gas argued that the loss of money was due to Jane Group’s “carelessness” and lack of cybersecurity.
In the end, Adjudicator Darling found that both parties were innocent victims of the hacker and ruled that as neither party had exhibited blameworthy conduct, the case must be decided in favour of the Claimant, Jane Group.
Key Takeaway
As we move towards an increasingly digital world, this case serves as a reminder to keep an eye out for fraudulent activity. Take extra steps to make sure your electronic funds transfers are secure. Watch out for email red flags (typos, suspicious links, misspellings, a sense of urgency) and confirm payment details via an additional method – otherwise you might end up on the hook and have to pay twice!
This update is intended for general information only. If you have questions about the above, please contact the authors.
Click here to subscribe to Stewart McKelvey Thought Leadership.
Archive
As many of you will now know, the Nova Scotia Government introduced legislation on Friday, December 6, 2013, amending provisions of the Nova Scotia Trade Union Act dealing with First Contract Arbitration. This client update sets out…
Read MoreIn a decision that will largely be of interest to international organizations that have been granted some type of immunity in Canada, the Supreme Court of Canada (SCC) has confirmed that international organizations enjoy immunity…
Read MoreThe Prince Edward Island (“PEI”) legislature has proposed changes to the PEI Human Rights Act to add “gender expression” and “gender identity” as new protected grounds of discrimination. First introduced on November 13, 2013 the…
Read MoreWe previously circulated a client update regarding contemplated changes to automobile insurance in Prince Edward Island. Government has now published a consultation paper (www.gov.pe.ca/photos/original/eljautoinreform.pdf), seeking responses in writing on or before December 2, 2013. According to the consultation…
Read MoreThe Association of Caribbean Corporate Counsel (ACCC) released the inaugural edition of its quarterly journal, Caribbean Corporate Counsel, featuring CEO, John Rogers, Q.C., advisor on the International Advisory Board, and an article by partner Paul Smith, entitled “Governance…
Read MoreCHANGES, CHANGES AND MORE CHANGES: KEEPING UP WITH THE TEMPORARY FOREIGN WORKER PROGRAM These days, Canada’s Temporary Foreign Worker Program (“TFWP”) is more top of mind than ever for Canadian employers. This is in part…
Read MoreBy October 17, 2014 existing not-for-profit corporations incorporated under Part II of the Canada Corporations Act (the “Old Act”) are required to be continued under the new Canada Not-for-Profit Corporations Act (the “New Act”) or face the possibility of automatic administrative…
Read MoreIN THIS ISSUE: Reasonable Cause: A necessary prerequisite for random alcohol testing policies by Mark Tector, Steve Carpenter, CHRP, Melissa Everett Withers, Ruth Trask Business Succession: Why is it critical? by Richard Niedermayer, TEP Privacy Please: Nova Scotia brings in new…
Read MoreOn May 19, 2011, Nova Scotia’s Labour Standards Code was amended to protect foreign workers from exploitation by recruiters and employers. These amendments imposed a requirement for third-party recruiters to obtain a license from the Province to…
Read MoreFacts This appeal arose from a decision which held that the Dominion of Canada General Insurance Company (“Dominion”) has a duty to defend Larry and Lona Hannam and their teenage son Jordan in an action…
Read More